corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a08751-cf69-72fa-9cc3-ddf39689a339

Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!

blog.orange.tw · published 8 August 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.orange.tw Wayback capture
2blogs citing
First cited
25 Aug 2024
Most recent
24 Jun 2026
Rank this month
not ranked
Links from this post
40
Words captured
9,699

Cited by

Blog
In the post
Date
TrebledJ's Pages - TrebledJ's personal blog on programming, cybersecurity, music, and memes.
Sharing is Caring: Insecure Deserialization of Shared References in C++ Read at the source ↗
24 Jun 2026
PentesterLab
Research Worth Reading Week 34/2024 Read at the source ↗
25 Aug 2024

Links from this post

Link
Host
https://blog.orange.tw/2024/08/confusion-attacks-ch.html
blog.orange.tw
https://blog.orange.tw/2024/08/confusion-attacks-en.html
blog.orange.tw
https://www.blackhat.com/us-24/briefings/schedule/index.html
blackhat.com
https://hitcon.org/2024/CMT/agenda/eff94e55-3f1d-4229-a65a-65ade9524421/
hitcon.org
https://orangecon.nl/
orangecon.nl
https://i.blackhat.com/BH-US-24/Presentations/US24-Orange-Confusion-Attacks-Exploiting-Hidden-Semantic-Thursday.pdf
i.blackhat.com
https://www.akamai.com/blog/security-research/2024-august-apache-waf-proactive-collaboration-orange-tsai-devcore
akamai.com
https://esta.cbp.dhs.gov/
esta.cbp.dhs.gov
https://www.blackhat.com/us-22/briefings/schedule/index.html
blackhat.com
https://httpd.apache.org/docs/2.4/mpm.html
httpd.apache.org
https://httpd.apache.org/docs/2.4/mod/
httpd.apache.org
https://github.com/apache/httpd/blob/2.4.58/include/httpd.h
github.com
https://httpd.apache.org/security/vulnerabilities_24.html
httpd.apache.org
https://github.com/apache/httpd/blob/2.4.58/modules/mappers/mod_rewrite.c
github.com
https://httpd.apache.org/docs/2.4/rewrite/flags.html
httpd.apache.org
https://github.com/php/php-src/blob/ce51bfac759dedac1537f4d5666dcd33fbc4a281/sapi/fpm/fpm/fpm_main.c
github.com
https://github.com/apache/httpd/blob/c3ad18b7ee32da93eabaae7b94541d3c32264340/modules/mappers/mod_rewrite.c
github.com
https://httpd.apache.org/docs/current/rewrite/remapping.html
httpd.apache.org
https://github.com/apache/httpd/blob/trunk/docs/conf/httpd.conf.in
github.com
https://sources.debian.org/src/apache2/2.4.62-1/debian/config-dir/apache2.conf.in/
sources.debian.org
https://github.com/vulhub/vulhub/tree/master/phpunit/CVE-2017-9841
github.com
https://httpd.apache.org/docs/current/mod/core.html
httpd.apache.org
https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x/src/main/http_config.c
svn.apache.org
https://github.com/apache/httpd/blob/2.4.58/server/config.c
github.com
https://web.archive.org/web/20210909012535/https://zeronights.ru/wp-content/uploads/2021/09/013_dmitriev-maksim.pdf
web.archive.org
https://github.com/owasp-modsecurity/ModSecurity/issues/2514
github.com
https://github.com/apache/httpd/commit/3303dc4f7273e05ea9a80402b33f68cd155c146a
github.com
https://datatracker.ietf.org/doc/html/rfc3875
datatracker.ietf.org
https://github.com/apache/httpd/blob/2.4.58/modules/generators/mod_cgi.c
github.com
https://github.com/apache/httpd/blob/2.4.58/modules/http/http_request.c
github.com
https://django-revproxy.readthedocs.io/en/latest/
django-revproxy.readthedocs.io
https://cloud.google.com/compute/docs/metadata/querying-metadata
cloud.google.com
https://hub.docker.com/_/php
hub.docker.com
https://www.leavesongs.com/PENETRATION/docker-php-include-getshell.html
leavesongs.com
https://x.com/phithon_xg
x.com
https://httpd.apache.org/docs/2.4/en/mod/core.html
httpd.apache.org
https://en.hackndo.com/ntlm-relay/
en.hackndo.com
https://sources.debian.org/src/apache2/2.4.62-1/debian/config-dir/mods-available/mime.conf/
sources.debian.org
https://github.com/orangetw/My-CTF-Web-Challenges?tab=readme-ov-file
github.com
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41773
cve.mitre.org